Dataset statistics
| Number of variables | 55 |
|---|---|
| Number of observations | 3296031 |
| Missing cells | 8034621 |
| Missing cells (%) | 4.4% |
| Duplicate rows | 0 |
| Duplicate rows (%) | 0.0% |
| Total size in memory | 1.4 GiB |
| Average record size in memory | 440.0 B |
Variable types
| CAT | 47 |
|---|---|
| NUM | 5 |
| BOOL | 3 |
Data Type has constant value "3296031" | Constant |
Visibility has constant value "3296031" | Constant |
COCOM_EVENTDATA_DATA_IPADDRESS has constant value "3296031" | Constant |
EVENTDATA_DATA_LOGONTYPE has constant value "3296031" | Constant |
EVENTDATA_DATA_PROCESSID has constant value "3296031" | Constant |
EVENTDATA_DATA_SUBJECTLOGONID has constant value "3296031" | Constant |
EVENTDATA_DATA_SUBJECTUSERSID has constant value "3296031" | Constant |
SYSTEM_CHANNEL has constant value "3296031" | Constant |
SYSTEM_EVENTID has constant value "3296031" | Constant |
SYSTEM_KEYWORDS has constant value "3296031" | Constant |
SYSTEM_LEVEL has constant value "3296031" | Constant |
SYSTEM_OPCODE has constant value "3296031" | Constant |
SYSTEM_PROVIDER_GUID has constant value "3296031" | Constant |
SYSTEM_PROVIDER_NAME has constant value "3296031" | Constant |
SYSTEM_TASK has constant value "3296031" | Constant |
SYSTEM_VERSION has constant value "3296031" | Constant |
EVENTDATA_DATA_IPADDRESS has a high cardinality: 473 distinct values | High cardinality |
EVENTDATA_DATA_LOGONGUID has a high cardinality: 126003 distinct values | High cardinality |
EVENTDATA_DATA_TARGETLOGONID has a high cardinality: 3295757 distinct values | High cardinality |
EVENTDATA_DATA_TARGETUSERNAME has a high cardinality: 984 distinct values | High cardinality |
EVENTDATA_DATA_TARGETUSERNAME_LCASE has a high cardinality: 984 distinct values | High cardinality |
EVENTDATA_DATA_TARGETUSERSID has a high cardinality: 1059 distinct values | High cardinality |
EVENTDATA_DATA_WORKSTATIONNAME has a high cardinality: 264 distinct values | High cardinality |
FILENAME_INGEST has a high cardinality: 3881 distinct values | High cardinality |
LOCAL_SYSTEM_TIMECREATED_SYSTEMTIME has a high cardinality: 3170345 distinct values | High cardinality |
LOCAL_TIMESTAMP has a high cardinality: 3170345 distinct values | High cardinality |
SITE_COLLECTION has a high cardinality: 97 distinct values | High cardinality |
SYSTEM_COMPUTER has a high cardinality: 97 distinct values | High cardinality |
SYSTEM_COMPUTER_REVERSE has a high cardinality: 97 distinct values | High cardinality |
SYSTEM_TIMECREATED_SYSTEMTIME has a high cardinality: 3170345 distinct values | High cardinality |
LONGITUDE_EVENTDATA_DATA_IPADDRESS is highly correlated with LATITUDE_EVENTDATA_DATA_IPADDRESS | High correlation |
LATITUDE_EVENTDATA_DATA_IPADDRESS is highly correlated with LONGITUDE_EVENTDATA_DATA_IPADDRESS | High correlation |
EVENTDATA_DATA_KEYLENGTH is highly correlated with EVENTDATA_DATA_AUTHENTICATIONPACKAGENAME and 1 other fields | High correlation |
EVENTDATA_DATA_AUTHENTICATIONPACKAGENAME is highly correlated with EVENTDATA_DATA_KEYLENGTH and 1 other fields | High correlation |
EVENTDATA_DATA_LOGONPROCESSNAME is highly correlated with EVENTDATA_DATA_AUTHENTICATIONPACKAGENAME and 1 other fields | High correlation |
EVENTDATA_DATA_TARGETDOMAINNAME is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 6 other fields | High correlation |
COUNTRY_EVENTDATA_DATA_IPADDRESS is highly correlated with EVENTDATA_DATA_TARGETDOMAINNAME and 9 other fields | High correlation |
EVENTDATA_DATA_LMPACKAGENAME is highly correlated with EVENTDATA_DATA_TARGETDOMAINNAME and 2 other fields | High correlation |
EVENTDATA_DATA_TARGETDOMAINNAME_LCASE is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 6 other fields | High correlation |
EVENTDATA_DATA_TARGETDOMAINNAME_REVERSE is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 6 other fields | High correlation |
IPBRANCHCATEGORY_EVENTDATA_DATA_IPADDRESS is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 9 other fields | High correlation |
LATITUDE_EVENTDATA_DATA_IPADDRESS is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 9 other fields | High correlation |
LOCATION is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 8 other fields | High correlation |
DOMAIN is highly correlated with LOCATION and 4 other fields | High correlation |
LONGITUDE_EVENTDATA_DATA_IPADDRESS is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 9 other fields | High correlation |
NETWORK_COLLECTION is highly correlated with DOMAIN and 4 other fields | High correlation |
SITE_COLLECTION is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 9 other fields | High correlation |
DOMAINCONTROLLERNUMBER is highly correlated with SITE_COLLECTION and 2 other fields | High correlation |
SYSTEM_COMPUTER is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 9 other fields | High correlation |
SYSTEM_COMPUTER_REVERSE is highly correlated with COUNTRY_EVENTDATA_DATA_IPADDRESS and 9 other fields | High correlation |
ARCHITECTURE has 307183 (9.3%) missing values | Missing |
DOMAIN has 307183 (9.3%) missing values | Missing |
DOMAINCONTROLLER has 307183 (9.3%) missing values | Missing |
DOMAINCONTROLLERNUMBER has 307183 (9.3%) missing values | Missing |
EVENTDATA_DATA_LMPACKAGENAME has 3249346 (98.6%) missing values | Missing |
EVENTDATA_DATA_WORKSTATIONNAME has 3249346 (98.6%) missing values | Missing |
LOCATION has 307183 (9.3%) missing values | Missing |
EVENTDATA_DATA_TARGETLOGONID is uniformly distributed | Uniform |
LOCAL_SYSTEM_TIMECREATED_SYSTEMTIME is uniformly distributed | Uniform |
LOCAL_TIMESTAMP is uniformly distributed | Uniform |
SYSTEM_TIMECREATED_SYSTEMTIME is uniformly distributed | Uniform |
Id has unique values | Unique |
Reproduction
| Analysis started | 2020-10-01 02:07:24.187932 |
|---|---|
| Analysis finished | 2020-10-01 02:25:54.159137 |
| Duration | 18 minutes and 29.97 seconds |
| Software version | pandas-profiling v2.9.0 |
| Download configuration | config.yaml |
| Distinct | 3296031 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 9a3c63c20dafa9ac4c235af9d36c19da | 1 |
|---|---|
| 5419a91ab6a4c2684c642f89150db801 | 1 |
| 30a8bab155562a90ee7bf59309af8558 | 1 |
| da5106d2c837210e3a800cbb169dd5f9 | 1 |
| 04a836845a5d135f467cb57f466f1688 | 1 |
| Other values (3296026) |
| Value | Count | Frequency (%) | |
| 9a3c63c20dafa9ac4c235af9d36c19da | 1 | < 0.1% | |
| 5419a91ab6a4c2684c642f89150db801 | 1 | < 0.1% | |
| 30a8bab155562a90ee7bf59309af8558 | 1 | < 0.1% | |
| da5106d2c837210e3a800cbb169dd5f9 | 1 | < 0.1% | |
| 04a836845a5d135f467cb57f466f1688 | 1 | < 0.1% | |
| 91c43bf1430ccfc0854a8594c0c93954 | 1 | < 0.1% | |
| 31e3d8ed94f79099ce484626b305037a | 1 | < 0.1% | |
| 878c70a06d140b0e5981129d9f588d3c | 1 | < 0.1% | |
| d4fa8541e9ef7a71894bbab7e310aab5 | 1 | < 0.1% | |
| 566b9e5806912c88233019135157996f | 1 | < 0.1% | |
| Other values (3296021) | 3296021 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 3296031 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 32 |
|---|---|
| Median length | 32 |
| Mean length | 32 |
| Min length | 32 |
Timestamp
Real number (ℝ≥0)
| Distinct | 3170345 |
|---|---|
| Distinct (%) | 96.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 1.600857555e+12 |
|---|---|
| Minimum | 1.60056e+12 |
| Maximum | 1.601158981e+12 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 25.1 MiB |
Quantile statistics
| Minimum | 1.60056e+12 |
|---|---|
| 5-th percentile | 1.600593735e+12 |
| Q1 | 1.600714902e+12 |
| median | 1.600858842e+12 |
| Q3 | 1.600995552e+12 |
| 95-th percentile | 1.60112561e+12 |
| Maximum | 1.601158981e+12 |
| Range | 598980538 |
| Interquartile range (IQR) | 280650728 |
Descriptive statistics
| Standard deviation | 167328535.3 |
|---|---|
| Coefficient of variation (CV) | 0.0001045243125 |
| Kurtosis | -1.124478905 |
| Mean | 1.600857555e+12 |
| Median Absolute Deviation (MAD) | 140837553 |
| Skewness | 0.02346747073 |
| Sum | 5.276476129e+18 |
| Variance | 2.799883873e+16 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 1.600621202e+12 | 15 | < 0.1% | |
| 1.600880402e+12 | 13 | < 0.1% | |
| 1.600880401e+12 | 12 | < 0.1% | |
| 1.600880401e+12 | 12 | < 0.1% | |
| 1.600621202e+12 | 11 | < 0.1% | |
| 1.600707602e+12 | 11 | < 0.1% | |
| 1.600707602e+12 | 10 | < 0.1% | |
| 1.600707601e+12 | 10 | < 0.1% | |
| 1.600693202e+12 | 10 | < 0.1% | |
| 1.600707601e+12 | 10 | < 0.1% | |
| Other values (3170335) | 3295917 | > 99.9% |
| Value | Count | Frequency (%) | |
| 1.60056e+12 | 1 | < 0.1% | |
| 1.60056e+12 | 1 | < 0.1% | |
| 1.60056e+12 | 2 | < 0.1% | |
| 1.60056e+12 | 1 | < 0.1% | |
| 1.60056e+12 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 1.601158981e+12 | 1 | < 0.1% | |
| 1.601158907e+12 | 1 | < 0.1% | |
| 1.601158859e+12 | 1 | < 0.1% | |
| 1.601158642e+12 | 1 | < 0.1% | |
| 1.601158128e+12 | 1 | < 0.1% |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| evtx-security-c |
|---|
| Value | Count | Frequency (%) | |
| evtx-security-c | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 15 |
|---|---|
| Median length | 15 |
| Mean length | 15 |
| Min length | 15 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| U&FOUO |
|---|
| Value | Count | Frequency (%) | |
| U&FOUO | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 6 |
|---|---|
| Median length | 6 |
| Mean length | 6 |
| Min length | 6 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 307183 |
| Missing (%) | 9.3% |
| Memory size | 25.1 MiB |
| P |
|---|
| Value | Count | Frequency (%) | |
| P | 2988848 | 90.7% | |
| (Missing) | 307183 | 9.3% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 1 |
| Mean length | 1.186395698 |
| Min length | 1 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| USINDOPACOM |
|---|
| Value | Count | Frequency (%) | |
| USINDOPACOM | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 11 |
|---|---|
| Median length | 11 |
| Mean length | 11 |
| Min length | 11 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| PR | |
|---|---|
| TW | 14 |
| Value | Count | Frequency (%) | |
| PR | 3296017 | > 99.9% | |
| TW | 14 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 2 |
|---|---|
| Median length | 2 |
| Mean length | 2 |
| Min length | 2 |
| Distinct | 5 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 307183 |
| Missing (%) | 9.3% |
| Memory size | 25.1 MiB |
| SE | |
|---|---|
| NW | 1261 |
| DS | 1192 |
| NE | 1136 |
| SW | 417 |
| Value | Count | Frequency (%) | |
| SE | 2984842 | 90.6% | |
| NW | 1261 | < 0.1% | |
| DS | 1192 | < 0.1% | |
| NE | 1136 | < 0.1% | |
| SW | 417 | < 0.1% | |
| (Missing) | 307183 | 9.3% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 2 |
| Mean length | 2.093197849 |
| Min length | 2 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 307183 |
| Missing (%) | 9.3% |
| Memory size | 25.1 MiB |
| A1 |
|---|
| Value | Count | Frequency (%) | |
| A1 | 2988848 | 90.7% | |
| (Missing) | 307183 | 9.3% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 2 |
| Mean length | 2.093197849 |
| Min length | 2 |
| Distinct | 4 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 307183 |
| Missing (%) | 9.3% |
| Memory size | 25.1 MiB |
| 2 | |
|---|---|
| 1 | |
| 4 | 806 |
| 3 | 638 |
| Value | Count | Frequency (%) | |
| 2 | 1507410 | 45.7% | |
| 1 | 1479994 | 44.9% | |
| 4 | 806 | < 0.1% | |
| 3 | 638 | < 0.1% | |
| (Missing) | 307183 | 9.3% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 3 |
| Mean length | 3 |
| Min length | 3 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| Kerberos | |
|---|---|
| NTLM | 46685 |
| Value | Count | Frequency (%) | |
| Kerberos | 3249346 | 98.6% | |
| NTLM | 46685 | 1.4% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 8 |
|---|---|
| Median length | 8 |
| Mean length | 7.943343979 |
| Min length | 4 |
EVENTDATA_DATA_IMPERSONATIONLEVEL
Categorical
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| %%1833 | |
|---|---|
| %%1840 | 25603 |
| Value | Count | Frequency (%) | |
| %%1833 | 3270428 | 99.2% | |
| %%1840 | 25603 | 0.8% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 6 |
|---|---|
| Median length | 6 |
| Mean length | 6 |
| Min length | 6 |
| Distinct | 473 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 206.37.250.242 | 163965 |
|---|---|
| 206.37.250.246 | 157570 |
| 192.86.234.58 | 29375 |
| 192.86.236.54 | 21703 |
| 192.86.236.212 | 18586 |
| Other values (468) |
| Value | Count | Frequency (%) | |
| 206.37.250.242 | 163965 | 5.0% | |
| 206.37.250.246 | 157570 | 4.8% | |
| 192.86.234.58 | 29375 | 0.9% | |
| 192.86.236.54 | 21703 | 0.7% | |
| 192.86.236.212 | 18586 | 0.6% | |
| 192.86.236.12 | 16390 | 0.5% | |
| 192.86.233.249 | 15823 | 0.5% | |
| 192.86.233.58 | 15714 | 0.5% | |
| 192.86.233.28 | 15677 | 0.5% | |
| 192.86.233.77 | 15006 | 0.5% | |
| Other values (463) | 2826222 | 85.7% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 14 |
|---|---|
| Median length | 13 |
| Mean length | 13.48028887 |
| Min length | 12 |
EVENTDATA_DATA_IPPORT
Real number (ℝ≥0)
| Distinct | 18656 |
|---|---|
| Distinct (%) | 0.6% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 57381.07743 |
|---|---|
| Minimum | 2278 |
| Maximum | 65534 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 25.1 MiB |
Quantile statistics
| Minimum | 2278 |
|---|---|
| 5-th percentile | 49932 |
| Q1 | 53296 |
| median | 57464 |
| Q3 | 61524 |
| 95-th percentile | 64736 |
| Maximum | 65534 |
| Range | 63256 |
| Interquartile range (IQR) | 8228 |
Descriptive statistics
| Standard deviation | 4820.427109 |
|---|---|
| Coefficient of variation (CV) | 0.08400726033 |
| Kurtosis | 1.389056667 |
| Mean | 57381.07743 |
| Median Absolute Deviation (MAD) | 4111 |
| Skewness | -0.2980215218 |
| Sum | 1.8912981e+11 |
| Variance | 23236517.52 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 49732 | 264 | < 0.1% | |
| 49757 | 263 | < 0.1% | |
| 49753 | 262 | < 0.1% | |
| 49733 | 261 | < 0.1% | |
| 49770 | 261 | < 0.1% | |
| 49761 | 260 | < 0.1% | |
| 49752 | 259 | < 0.1% | |
| 49758 | 257 | < 0.1% | |
| 49769 | 257 | < 0.1% | |
| 53562 | 256 | < 0.1% | |
| Other values (18646) | 3293431 | 99.9% |
| Value | Count | Frequency (%) | |
| 2278 | 1 | < 0.1% | |
| 2281 | 1 | < 0.1% | |
| 2282 | 1 | < 0.1% | |
| 2290 | 1 | < 0.1% | |
| 2291 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 65534 | 201 | < 0.1% | |
| 65533 | 211 | < 0.1% | |
| 65532 | 209 | < 0.1% | |
| 65531 | 204 | < 0.1% | |
| 65530 | 205 | < 0.1% |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 0 | |
|---|---|
| 128 | 46685 |
| Value | Count | Frequency (%) | |
| 0 | 3249346 | 98.6% | |
| 128 | 46685 | 1.4% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 1 |
| Mean length | 1.02832801 |
| Min length | 1 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 3249346 |
| Missing (%) | 98.6% |
| Memory size | 25.1 MiB |
| NTLM V2 | |
|---|---|
| NTLM V1 | 613 |
| Value | Count | Frequency (%) | |
| NTLM V2 | 46072 | 1.4% | |
| NTLM V1 | 613 | < 0.1% | |
| (Missing) | 3249346 | 98.6% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 7 |
|---|---|
| Median length | 3 |
| Mean length | 3.056656021 |
| Min length | 3 |
| Distinct | 126003 |
|---|---|
| Distinct (%) | 3.8% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 00000000-0000-0000-0000-000000000000 | 46685 |
|---|---|
| 081618EB-6120-AC92-E84E-15978B1BAC2B | 6194 |
| 033022EA-62BE-8B5A-21F0-914BCCF31EFA | 6187 |
| DC3CEB97-FEA6-5E0C-F9ED-DD42AEB290C3 | 5804 |
| F3C23B1C-93BF-41F8-5EEE-0E9CDB7F0E64 | 5796 |
| Other values (125998) |
| Value | Count | Frequency (%) | |
| 00000000-0000-0000-0000-000000000000 | 46685 | 1.4% | |
| 081618EB-6120-AC92-E84E-15978B1BAC2B | 6194 | 0.2% | |
| 033022EA-62BE-8B5A-21F0-914BCCF31EFA | 6187 | 0.2% | |
| DC3CEB97-FEA6-5E0C-F9ED-DD42AEB290C3 | 5804 | 0.2% | |
| F3C23B1C-93BF-41F8-5EEE-0E9CDB7F0E64 | 5796 | 0.2% | |
| EF28C111-190A-F9B3-90FD-7654D73AD4D7 | 5769 | 0.2% | |
| EA8A17F3-838A-2810-B5C0-F0E730F7D906 | 5747 | 0.2% | |
| E2B60118-DFB4-9687-CFB7-00B8044EC707 | 5739 | 0.2% | |
| 614E7F26-F443-129D-1A87-A641512D2CC5 | 5727 | 0.2% | |
| A7341535-E133-57EF-0B01-A3D0BD3D4117 | 5692 | 0.2% | |
| Other values (125993) | 3196691 | 97.0% |
Frequencies of value counts
Unique
| Unique | 39110 ? |
|---|---|
| Unique (%) | 1.2% |
Histogram of lengths of the category
Length
| Max length | 36 |
|---|---|
| Median length | 36 |
| Mean length | 36 |
| Min length | 36 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| Kerberos | |
|---|---|
| NtLmSsp | 46685 |
| Value | Count | Frequency (%) | |
| Kerberos | 3249346 | 98.6% | |
| NtLmSsp | 46685 | 1.4% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 8 |
|---|---|
| Median length | 8 |
| Mean length | 8 |
| Min length | 8 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 3 |
|---|
| Value | Count | Frequency (%) | |
| 3 | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 1 |
|---|---|
| Median length | 1 |
| Mean length | 1 |
| Min length | 1 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 0x0 |
|---|
| Value | Count | Frequency (%) | |
| 0x0 | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 3 |
| Mean length | 3 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 0x0 |
|---|
| Value | Count | Frequency (%) | |
| 0x0 | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 3 |
| Mean length | 3 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| S-1-0-0 |
|---|
| Value | Count | Frequency (%) | |
| S-1-0-0 | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 7 |
|---|---|
| Median length | 7 |
| Mean length | 7 |
| Min length | 7 |
| Distinct | 4 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| NASE | |
|---|---|
| NT AUTHORITY | 613 |
| NANW | 13 |
| NAE | 1 |
| Value | Count | Frequency (%) | |
| NASE | 3295404 | > 99.9% | |
| NT AUTHORITY | 613 | < 0.1% | |
| NANW | 13 | < 0.1% | |
| NAE | 1 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 12 |
|---|---|
| Median length | 4 |
| Mean length | 4.001487547 |
| Min length | 3 |
| Distinct | 4 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| nase | |
|---|---|
| nt authority | 613 |
| nanw | 13 |
| nae | 1 |
| Value | Count | Frequency (%) | |
| nase | 3295404 | > 99.9% | |
| nt authority | 613 | < 0.1% | |
| nanw | 13 | < 0.1% | |
| nae | 1 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 12 |
|---|---|
| Median length | 4 |
| Mean length | 4.001487547 |
| Min length | 3 |
| Distinct | 4 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| NASE | |
|---|---|
| NT AUTHORITY | 613 |
| NANW | 13 |
| NAE | 1 |
| Value | Count | Frequency (%) | |
| NASE | 3295404 | > 99.9% | |
| NT AUTHORITY | 613 | < 0.1% | |
| NANW | 13 | < 0.1% | |
| NAE | 1 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 12 |
|---|---|
| Median length | 4 |
| Mean length | 4.001487547 |
| Min length | 3 |
| Distinct | 3295757 |
|---|---|
| Distinct (%) | > 99.9% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 0x125bcd5d8 | 2 |
|---|---|
| 0xcf350a1a | 2 |
| 0x72ca1632 | 2 |
| 0x2798646e | 2 |
| 0x120887a86 | 2 |
| Other values (3295752) |
| Value | Count | Frequency (%) | |
| 0x125bcd5d8 | 2 | < 0.1% | |
| 0xcf350a1a | 2 | < 0.1% | |
| 0x72ca1632 | 2 | < 0.1% | |
| 0x2798646e | 2 | < 0.1% | |
| 0x120887a86 | 2 | < 0.1% | |
| 0x10ff09376 | 2 | < 0.1% | |
| 0x9a3cbe41 | 2 | < 0.1% | |
| 0xd1be5a5b | 2 | < 0.1% | |
| 0xd1873633 | 2 | < 0.1% | |
| 0xd03a76bd | 2 | < 0.1% | |
| Other values (3295747) | 3296011 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 3295483 ? |
|---|---|
| Unique (%) | > 99.9% |
Histogram of lengths of the category
Length
| Max length | 11 |
|---|---|
| Median length | 10 |
| Mean length | 10.21045767 |
| Min length | 8 |
| Distinct | 984 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| BUCHA1SEP000001$ | 163953 |
|---|---|
| BUCHA1SEP000002$ | 157563 |
| carlos.nievesbadillo | 22240 |
| nancy.ramos1 | 15467 |
| BUCHA7FSGP01$ | 13876 |
| Other values (979) |
| Value | Count | Frequency (%) | |
| BUCHA1SEP000001$ | 163953 | 5.0% | |
| BUCHA1SEP000002$ | 157563 | 4.8% | |
| carlos.nievesbadillo | 22240 | 0.7% | |
| nancy.ramos1 | 15467 | 0.5% | |
| BUCHA7FSGP01$ | 13876 | 0.4% | |
| christopher.c.nelson | 11206 | 0.3% | |
| BUCHW1H1AAWK251$ | 10536 | 0.3% | |
| BUCHB4RADIUS01$ | 10363 | 0.3% | |
| BUCHW1H1AAWK247$ | 9915 | 0.3% | |
| BUCHW1H1AAWK245$ | 9462 | 0.3% | |
| Other values (974) | 2871450 | 87.1% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 20 |
|---|---|
| Median length | 16 |
| Mean length | 15.95537845 |
| Min length | 7 |
| Distinct | 984 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| bucha1sep000001$ | 163953 |
|---|---|
| bucha1sep000002$ | 157563 |
| carlos.nievesbadillo | 22240 |
| nancy.ramos1 | 15467 |
| bucha7fsgp01$ | 13876 |
| Other values (979) |
| Value | Count | Frequency (%) | |
| bucha1sep000001$ | 163953 | 5.0% | |
| bucha1sep000002$ | 157563 | 4.8% | |
| carlos.nievesbadillo | 22240 | 0.7% | |
| nancy.ramos1 | 15467 | 0.5% | |
| bucha7fsgp01$ | 13876 | 0.4% | |
| christopher.c.nelson | 11206 | 0.3% | |
| buchw1h1aawk251$ | 10536 | 0.3% | |
| buchb4radius01$ | 10363 | 0.3% | |
| buchw1h1aawk247$ | 9915 | 0.3% | |
| buchw1h1aawk245$ | 9462 | 0.3% | |
| Other values (974) | 2871450 | 87.1% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 20 |
|---|---|
| Median length | 16 |
| Mean length | 15.95537845 |
| Min length | 7 |
| Distinct | 1059 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| S-1-5-18 | 211712 |
|---|---|
| S-1-5-21-3822721094-983390456-1902330015-10755300 | 57042 |
| S-1-5-21-3822721094-983390456-1902330015-10484437 | 52762 |
| S-1-5-21-3822721094-983390456-1902330015-11492077 | 22240 |
| S-1-5-21-3822721094-983390456-1902330015-352989 | 15467 |
| Other values (1054) |
| Value | Count | Frequency (%) | |
| S-1-5-18 | 211712 | 6.4% | |
| S-1-5-21-3822721094-983390456-1902330015-10755300 | 57042 | 1.7% | |
| S-1-5-21-3822721094-983390456-1902330015-10484437 | 52762 | 1.6% | |
| S-1-5-21-3822721094-983390456-1902330015-11492077 | 22240 | 0.7% | |
| S-1-5-21-3822721094-983390456-1902330015-352989 | 15467 | 0.5% | |
| S-1-5-21-3822721094-983390456-1902330015-10172758 | 13876 | 0.4% | |
| S-1-5-21-3822721094-983390456-1902330015-214680 | 11206 | 0.3% | |
| S-1-5-21-3822721094-983390456-1902330015-17116019 | 10536 | 0.3% | |
| S-1-5-21-3822721094-983390456-1902330015-8147679 | 10363 | 0.3% | |
| S-1-5-21-3822721094-983390456-1902330015-16440240 | 9915 | 0.3% | |
| Other values (1049) | 2880912 | 87.4% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 50 |
|---|---|
| Median length | 49 |
| Mean length | 46.09201127 |
| Min length | 7 |
| Distinct | 264 |
|---|---|
| Distinct (%) | 0.6% |
| Missing | 3249346 |
| Missing (%) | 98.6% |
| Memory size | 25.1 MiB |
| BUCHA1SEP000001 | |
|---|---|
| BUCHA1SEP000002 | |
| BUCHA7FSGP01 | |
| BUCHPSPR2 | 1065 |
| BUCHW6SAAAWK018 | 720 |
| Other values (259) |
| Value | Count | Frequency (%) | |
| BUCHA1SEP000001 | 16399 | 0.5% | |
| BUCHA1SEP000002 | 13211 | 0.4% | |
| BUCHA7FSGP01 | 11220 | 0.3% | |
| BUCHPSPR2 | 1065 | < 0.1% | |
| BUCHW6SAAAWK018 | 720 | < 0.1% | |
| BUCHA0NACS02 | 556 | < 0.1% | |
| BUCHA0NACS01 | 517 | < 0.1% | |
| BUCHNETCB6NS001 | 261 | < 0.1% | |
| BUCHA0SWSYSLOG | 212 | < 0.1% | |
| BUCHA7WDS | 209 | < 0.1% | |
| Other values (254) | 2315 | 0.1% | |
| (Missing) | 3249346 | 98.6% |
Frequencies of value counts
Unique
| Unique | 95 ? |
|---|---|
| Unique (%) | 0.2% |
Histogram of lengths of the category
Length
| Max length | 15 |
|---|---|
| Median length | 3 |
| Mean length | 3.155030095 |
| Min length | 3 |
| Distinct | 3881 |
|---|---|
| Distinct (%) | 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_25_bucha1sep000001-security-2020-09-25-20-32-57-736.xml.zip | 99744 |
|---|---|
| nase.ds.army.mil_bucha1sep000002_security_2020_09_23_bucha1sep000002-security-2020-09-23-19-16-22-492.xml.zip | 98295 |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_26_bucha1sep000001-security-2020-09-26-09-55-11-528.xml.zip,nase.ds.army.mil_bucha1sep000001_security_2020_09_26_bucha1sep000001-security-2020-09-26-12-06-42-977.xml.zip | 95460 |
| nase.ds.army.mil_bucha1sep000002_security_2020_09_23_bucha1sep000002-security-2020-09-23-07-37-50-904.xml.zip | 88647 |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_23_bucha1sep000001-security-2020-09-23-21-55-11-736.xml.zip,nase.ds.army.mil_bucha1sep000001_security_2020_09_24_bucha1sep000001-security-2020-09-24-00-35-15-765.xml.zip | 87291 |
| Other values (3876) |
| Value | Count | Frequency (%) | |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_25_bucha1sep000001-security-2020-09-25-20-32-57-736.xml.zip | 99744 | 3.0% | |
| nase.ds.army.mil_bucha1sep000002_security_2020_09_23_bucha1sep000002-security-2020-09-23-19-16-22-492.xml.zip | 98295 | 3.0% | |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_26_bucha1sep000001-security-2020-09-26-09-55-11-528.xml.zip,nase.ds.army.mil_bucha1sep000001_security_2020_09_26_bucha1sep000001-security-2020-09-26-12-06-42-977.xml.zip | 95460 | 2.9% | |
| nase.ds.army.mil_bucha1sep000002_security_2020_09_23_bucha1sep000002-security-2020-09-23-07-37-50-904.xml.zip | 88647 | 2.7% | |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_23_bucha1sep000001-security-2020-09-23-21-55-11-736.xml.zip,nase.ds.army.mil_bucha1sep000001_security_2020_09_24_bucha1sep000001-security-2020-09-24-00-35-15-765.xml.zip | 87291 | 2.6% | |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_25_bucha1sep000001-security-2020-09-25-09-55-11-691.xml.zip,nase.ds.army.mil_bucha1sep000001_security_2020_09_25_bucha1sep000001-security-2020-09-25-10-04-23-670.xml.zip | 85937 | 2.6% | |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_26_bucha1sep000001-security-2020-09-26-21-55-11-965.xml.zip | 84802 | 2.6% | |
| nase.ds.army.mil_bucha1sep000002_security_2020_09_24_bucha1sep000002-security-2020-09-24-07-51-10-541.xml.zip | 83601 | 2.5% | |
| nase.ds.army.mil_bucha1sep000002_security_2020_09_21_bucha1sep000002-security-2020-09-21-21-55-11-897.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_22_bucha1sep000002-security-2020-09-22-02-17-11-797.xml.zip | 80936 | 2.5% | |
| nase.ds.army.mil_bucha1sep000001_security_2020_09_24_bucha1sep000001-security-2020-09-24-09-55-11-549.xml.zip,nase.ds.army.mil_bucha1sep000001_security_2020_09_24_bucha1sep000001-security-2020-09-24-13-41-49-548.xml.zip | 79659 | 2.4% | |
| Other values (3871) | 2411659 | 73.2% |
Frequencies of value counts
Unique
| Unique | 556 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 338 |
|---|---|
| Median length | 109 |
| Mean length | 157.8214741 |
| Min length | 104 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| Army | |
|---|---|
| Non-Army | 14 |
| Value | Count | Frequency (%) | |
| Army | 3296017 | > 99.9% | |
| Non-Army | 14 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 8 |
|---|---|
| Median length | 4 |
| Mean length | 4.00001699 |
| Min length | 4 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 18.411313 | |
|---|---|
| 23.5 | 14 |
| Value | Count | Frequency (%) | |
| 18.411313 | 3296017 | > 99.9% | |
| 23.5 | 14 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 9 |
|---|---|
| Median length | 9 |
| Mean length | 8.999978762 |
| Min length | 4 |
| Distinct | 3170345 |
|---|---|
| Distinct (%) | 96.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 2020-09-20T13:00:01.562-04:00[America/Puerto_Rico] | 15 |
|---|---|
| 2020-09-23T13:00:01.915-04:00[America/Puerto_Rico] | 13 |
| 2020-09-23T13:00:01.290-04:00[America/Puerto_Rico] | 12 |
| 2020-09-23T13:00:01.087-04:00[America/Puerto_Rico] | 12 |
| 2020-09-21T13:00:01.587-04:00[America/Puerto_Rico] | 11 |
| Other values (3170340) |
| Value | Count | Frequency (%) | |
| 2020-09-20T13:00:01.562-04:00[America/Puerto_Rico] | 15 | < 0.1% | |
| 2020-09-23T13:00:01.915-04:00[America/Puerto_Rico] | 13 | < 0.1% | |
| 2020-09-23T13:00:01.290-04:00[America/Puerto_Rico] | 12 | < 0.1% | |
| 2020-09-23T13:00:01.087-04:00[America/Puerto_Rico] | 12 | < 0.1% | |
| 2020-09-21T13:00:01.587-04:00[America/Puerto_Rico] | 11 | < 0.1% | |
| 2020-09-20T13:00:01.750-04:00[America/Puerto_Rico] | 11 | < 0.1% | |
| 2020-09-20T13:00:01.531-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| 2020-09-21T09:00:01.535-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| 2020-09-21T13:00:01.009-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| 2020-09-21T13:00:01.556-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| Other values (3170335) | 3295917 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 3057810 ? |
|---|---|
| Unique (%) | 92.8% |
Histogram of lengths of the category
Length
| Max length | 50 |
|---|---|
| Median length | 50 |
| Mean length | 49.99581345 |
| Min length | 42 |
| Distinct | 3170345 |
|---|---|
| Distinct (%) | 96.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 2020-09-20T13:00:01.562-04:00[America/Puerto_Rico] | 15 |
|---|---|
| 2020-09-23T13:00:01.915-04:00[America/Puerto_Rico] | 13 |
| 2020-09-23T13:00:01.290-04:00[America/Puerto_Rico] | 12 |
| 2020-09-23T13:00:01.087-04:00[America/Puerto_Rico] | 12 |
| 2020-09-21T13:00:01.587-04:00[America/Puerto_Rico] | 11 |
| Other values (3170340) |
| Value | Count | Frequency (%) | |
| 2020-09-20T13:00:01.562-04:00[America/Puerto_Rico] | 15 | < 0.1% | |
| 2020-09-23T13:00:01.915-04:00[America/Puerto_Rico] | 13 | < 0.1% | |
| 2020-09-23T13:00:01.290-04:00[America/Puerto_Rico] | 12 | < 0.1% | |
| 2020-09-23T13:00:01.087-04:00[America/Puerto_Rico] | 12 | < 0.1% | |
| 2020-09-21T13:00:01.587-04:00[America/Puerto_Rico] | 11 | < 0.1% | |
| 2020-09-20T13:00:01.750-04:00[America/Puerto_Rico] | 11 | < 0.1% | |
| 2020-09-20T13:00:01.531-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| 2020-09-21T09:00:01.535-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| 2020-09-21T13:00:01.009-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| 2020-09-21T13:00:01.556-04:00[America/Puerto_Rico] | 10 | < 0.1% | |
| Other values (3170335) | 3295917 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 3057810 ? |
|---|---|
| Unique (%) | 92.8% |
Histogram of lengths of the category
Length
| Max length | 50 |
|---|---|
| Median length | 50 |
| Mean length | 49.99581345 |
| Min length | 42 |
| Distinct | 15 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 307183 |
| Missing (%) | 9.3% |
| Memory size | 25.1 MiB |
| BUCH | |
|---|---|
| RUCK | 52245 |
| BLUE | 17131 |
| RILE | 1247 |
| HUAC | 1047 |
| Other values (10) | 1712 |
| Value | Count | Frequency (%) | |
| BUCH | 2915466 | 88.5% | |
| RUCK | 52245 | 1.6% | |
| BLUE | 17131 | 0.5% | |
| RILE | 1247 | < 0.1% | |
| HUAC | 1047 | < 0.1% | |
| BELV | 373 | < 0.1% | |
| MYER | 304 | < 0.1% | |
| HAMI | 280 | < 0.1% | |
| REDS | 248 | < 0.1% | |
| SCOT | 161 | < 0.1% | |
| Other values (5) | 346 | < 0.1% | |
| (Missing) | 307183 | 9.3% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 4 |
|---|---|
| Median length | 4 |
| Mean length | 3.906802151 |
| Min length | 3 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| -66.124234 | |
|---|---|
| 121 | 14 |
| Value | Count | Frequency (%) | |
| -66.124234 | 3296017 | > 99.9% | |
| 121 | 14 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 10 |
|---|---|
| Median length | 10 |
| Mean length | 9.999978762 |
| Min length | 5 |
| Distinct | 7 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| nase.ds.army.mil | |
|---|---|
| ds.army.mil | 79329 |
| nanw.ds.army.mil | 20774 |
| dahq.ds.army.mil | 20168 |
| nae.ds.army.mil | 18519 |
| Other values (2) | 11622 |
| Value | Count | Frequency (%) | |
| nase.ds.army.mil | 3145619 | 95.4% | |
| ds.army.mil | 79329 | 2.4% | |
| nanw.ds.army.mil | 20774 | 0.6% | |
| dahq.ds.army.mil | 20168 | 0.6% | |
| nae.ds.army.mil | 18519 | 0.6% | |
| nasw.ds.army.mil | 7061 | 0.2% | |
| service.ds.army.mil | 4561 | 0.1% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 19 |
|---|---|
| Median length | 16 |
| Mean length | 15.87819259 |
| Min length | 11 |
ORGANIZATION_OWNER_EVENTDATA_DATA_IPADDRESS
Categorical
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 14 |
| Missing (%) | < 0.1% |
| Memory size | 25.1 MiB |
| FORT BUCHANAN |
|---|
| Value | Count | Frequency (%) | |
| FORT BUCHANAN | 3296017 | > 99.9% | |
| (Missing) | 14 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 13 |
|---|---|
| Median length | 13 |
| Mean length | 12.99995752 |
| Min length | 3 |
| Distinct | 97 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| bucha1sep000002 | |
|---|---|
| bucha1sep000001 | |
| bragw4nhaah0se2 | 39845 |
| bragw4nhaah0se1 | 38109 |
| carsa1sevxd0002 | 35974 |
| Other values (92) |
| Value | Count | Frequency (%) | |
| bucha1sep000002 | 1464328 | 44.4% | |
| bucha1sep000001 | 1451138 | 44.0% | |
| bragw4nhaah0se2 | 39845 | 1.2% | |
| bragw4nhaah0se1 | 38109 | 1.2% | |
| carsa1sevxd0002 | 35974 | 1.1% | |
| carsa1sevxd0001 | 35067 | 1.1% | |
| braga1dsvxd0002 | 34989 | 1.1% | |
| rucka1sep000001 | 27644 | 0.8% | |
| braga1dsvxd0001 | 27479 | 0.8% | |
| rucka1sep000002 | 24601 | 0.7% | |
| Other values (87) | 116857 | 3.5% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 15 |
|---|---|
| Median length | 15 |
| Mean length | 15 |
| Min length | 15 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| Security |
|---|
| Value | Count | Frequency (%) | |
| Security | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 8 |
|---|---|
| Median length | 8 |
| Mean length | 8 |
| Min length | 8 |
| Distinct | 97 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| BUCHA1SEP000002.nase.ds.army.mil | |
|---|---|
| BUCHA1SEP000001.nase.ds.army.mil | |
| BRAGW4NHAAH0SE2.nase.ds.army.mil | 39845 |
| BRAGW4NHAAH0SE1.nase.ds.army.mil | 38109 |
| CARSA1SEVXD0002.nase.ds.army.mil | 35974 |
| Other values (92) |
| Value | Count | Frequency (%) | |
| BUCHA1SEP000002.nase.ds.army.mil | 1464328 | 44.4% | |
| BUCHA1SEP000001.nase.ds.army.mil | 1451138 | 44.0% | |
| BRAGW4NHAAH0SE2.nase.ds.army.mil | 39845 | 1.2% | |
| BRAGW4NHAAH0SE1.nase.ds.army.mil | 38109 | 1.2% | |
| CARSA1SEVXD0002.nase.ds.army.mil | 35974 | 1.1% | |
| CARSA1SEVXD0001.nase.ds.army.mil | 35067 | 1.1% | |
| BRAGA1DSVXD0002.ds.army.mil | 34989 | 1.1% | |
| RUCKA1SEP000001.nase.ds.army.mil | 27644 | 0.8% | |
| BRAGA1DSVXD0001.ds.army.mil | 27479 | 0.8% | |
| RUCKA1SEP000002.nase.ds.army.mil | 24601 | 0.7% | |
| Other values (87) | 116857 | 3.5% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 35 |
|---|---|
| Median length | 32 |
| Mean length | 31.87819714 |
| Min length | 27 |
| Distinct | 97 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| mil.army.ds.nase.BUCHA1SEP000002 | |
|---|---|
| mil.army.ds.nase.BUCHA1SEP000001 | |
| mil.army.ds.nase.BRAGW4NHAAH0SE2 | 39845 |
| mil.army.ds.nase.BRAGW4NHAAH0SE1 | 38109 |
| mil.army.ds.nase.CARSA1SEVXD0002 | 35974 |
| Other values (92) |
| Value | Count | Frequency (%) | |
| mil.army.ds.nase.BUCHA1SEP000002 | 1464328 | 44.4% | |
| mil.army.ds.nase.BUCHA1SEP000001 | 1451138 | 44.0% | |
| mil.army.ds.nase.BRAGW4NHAAH0SE2 | 39845 | 1.2% | |
| mil.army.ds.nase.BRAGW4NHAAH0SE1 | 38109 | 1.2% | |
| mil.army.ds.nase.CARSA1SEVXD0002 | 35974 | 1.1% | |
| mil.army.ds.nase.CARSA1SEVXD0001 | 35067 | 1.1% | |
| mil.army.ds.BRAGA1DSVXD0002 | 34989 | 1.1% | |
| mil.army.ds.nase.RUCKA1SEP000001 | 27644 | 0.8% | |
| mil.army.ds.BRAGA1DSVXD0001 | 27479 | 0.8% | |
| mil.army.ds.nase.RUCKA1SEP000002 | 24601 | 0.7% | |
| Other values (87) | 116857 | 3.5% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 35 |
|---|---|
| Median length | 32 |
| Mean length | 31.87819714 |
| Min length | 27 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 4624 |
|---|
| Value | Count | Frequency (%) | |
| 4624 | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 4 |
|---|---|
| Median length | 4 |
| Mean length | 4 |
| Min length | 4 |
SYSTEM_EVENTRECORDID
Real number (ℝ≥0)
| Distinct | 3295762 |
|---|---|
| Distinct (%) | > 99.9% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 1033912897 |
|---|---|
| Minimum | 25970053 |
| Maximum | 1.317018726e+10 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 25.1 MiB |
Quantile statistics
| Minimum | 25970053 |
|---|---|
| 5-th percentile | 715501397 |
| Q1 | 717807622.5 |
| median | 755951384 |
| Q3 | 758796238 |
| 95-th percentile | 1783433106 |
| Maximum | 1.317018726e+10 |
| Range | 1.31442172e+10 |
| Interquartile range (IQR) | 40988615.5 |
Descriptive statistics
| Standard deviation | 1605470878 |
|---|---|
| Coefficient of variation (CV) | 1.552810572 |
| Kurtosis | 45.28173914 |
| Mean | 1033912897 |
| Median Absolute Deviation (MAD) | 36196759 |
| Skewness | 6.631974294 |
| Sum | 3.407808961e+15 |
| Variance | 2.57753674e+18 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 716492174 | 2 | < 0.1% | |
| 719648493 | 2 | < 0.1% | |
| 719154312 | 2 | < 0.1% | |
| 717980731 | 2 | < 0.1% | |
| 718425523 | 2 | < 0.1% | |
| 718395298 | 2 | < 0.1% | |
| 716540697 | 2 | < 0.1% | |
| 717701991 | 2 | < 0.1% | |
| 717853203 | 2 | < 0.1% | |
| 716221884 | 2 | < 0.1% | |
| Other values (3295752) | 3296011 | > 99.9% |
| Value | Count | Frequency (%) | |
| 25970053 | 1 | < 0.1% | |
| 25970069 | 1 | < 0.1% | |
| 25970073 | 1 | < 0.1% | |
| 25971022 | 1 | < 0.1% | |
| 25972017 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 1.317018726e+10 | 1 | < 0.1% | |
| 1.317018132e+10 | 1 | < 0.1% | |
| 1.317018023e+10 | 1 | < 0.1% | |
| 1.317017084e+10 | 1 | < 0.1% | |
| 1.317016703e+10 | 1 | < 0.1% |
SYSTEM_EXECUTION_PROCESSID
Real number (ℝ≥0)
| Distinct | 54 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 910.7936995 |
|---|---|
| Minimum | 476 |
| Maximum | 952 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 25.1 MiB |
Quantile statistics
| Minimum | 476 |
|---|---|
| 5-th percentile | 772 |
| Q1 | 920 |
| median | 920 |
| Q3 | 932 |
| 95-th percentile | 932 |
| Maximum | 952 |
| Range | 476 |
| Interquartile range (IQR) | 12 |
Descriptive statistics
| Standard deviation | 49.42732491 |
|---|---|
| Coefficient of variation (CV) | 0.05426840891 |
| Kurtosis | 9.987728184 |
| Mean | 910.7936995 |
| Median Absolute Deviation (MAD) | 12 |
| Skewness | -3.287830579 |
| Sum | 3002004268 |
| Variance | 2443.060448 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 920 | 1481832 | 45.0% | |
| 932 | 1451138 | 44.0% | |
| 772 | 77115 | 2.3% | |
| 776 | 39921 | 1.2% | |
| 876 | 38812 | 1.2% | |
| 696 | 38109 | 1.2% | |
| 880 | 31040 | 0.9% | |
| 712 | 29671 | 0.9% | |
| 864 | 24697 | 0.7% | |
| 676 | 12406 | 0.4% | |
| Other values (44) | 71290 | 2.2% |
| Value | Count | Frequency (%) | |
| 476 | 1 | < 0.1% | |
| 668 | 3461 | 0.1% | |
| 676 | 12406 | 0.4% | |
| 680 | 3290 | 0.1% | |
| 684 | 759 | < 0.1% |
| Value | Count | Frequency (%) | |
| 952 | 52 | < 0.1% | |
| 940 | 62 | < 0.1% | |
| 936 | 14 | < 0.1% | |
| 932 | 1451138 | 44.0% | |
| 928 | 3198 | 0.1% |
SYSTEM_EXECUTION_THREADID
Real number (ℝ≥0)
| Distinct | 5698 |
|---|---|
| Distinct (%) | 0.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 10120.25315 |
|---|---|
| Minimum | 32 |
| Maximum | 24560 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 25.1 MiB |
Quantile statistics
| Minimum | 32 |
|---|---|
| 5-th percentile | 1644 |
| Q1 | 6852 |
| median | 10820 |
| Q3 | 13420 |
| 95-th percentile | 18168 |
| Maximum | 24560 |
| Range | 24528 |
| Interquartile range (IQR) | 6568 |
Descriptive statistics
| Standard deviation | 4809.018705 |
|---|---|
| Coefficient of variation (CV) | 0.4751875902 |
| Kurtosis | -0.3795239002 |
| Mean | 10120.25315 |
| Median Absolute Deviation (MAD) | 2808 |
| Skewness | -0.1791781929 |
| Sum | 3.33566681e+10 |
| Variance | 23126660.9 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 13208 | 164167 | 5.0% | |
| 13628 | 141696 | 4.3% | |
| 1644 | 127960 | 3.9% | |
| 13116 | 127441 | 3.9% | |
| 9188 | 120710 | 3.7% | |
| 14668 | 115078 | 3.5% | |
| 1864 | 114208 | 3.5% | |
| 9488 | 109718 | 3.3% | |
| 4372 | 94074 | 2.9% | |
| 13420 | 93796 | 2.8% | |
| Other values (5688) | 2087183 | 63.3% |
| Value | Count | Frequency (%) | |
| 32 | 15 | < 0.1% | |
| 36 | 78 | < 0.1% | |
| 52 | 9 | < 0.1% | |
| 60 | 1 | < 0.1% | |
| 64 | 5 | < 0.1% |
| Value | Count | Frequency (%) | |
| 24560 | 3 | < 0.1% | |
| 24548 | 1 | < 0.1% | |
| 24528 | 3 | < 0.1% | |
| 24520 | 82 | < 0.1% | |
| 24508 | 1 | < 0.1% |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 0x8020000000000000 |
|---|
| Value | Count | Frequency (%) | |
| 0x8020000000000000 | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 18 |
|---|---|
| Median length | 18 |
| Mean length | 18 |
| Min length | 18 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 0 |
|---|
| Value | Count | Frequency (%) | |
| 0 | 3296031 | 100.0% |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 0 |
|---|
| Value | Count | Frequency (%) | |
| 0 | 3296031 | 100.0% |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 54849625-5478-4994-A5BA-3E3B0328C30D |
|---|
| Value | Count | Frequency (%) | |
| 54849625-5478-4994-A5BA-3E3B0328C30D | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 36 |
|---|---|
| Median length | 36 |
| Mean length | 36 |
| Min length | 36 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| Microsoft-Windows-Security-Auditing |
|---|
| Value | Count | Frequency (%) | |
| Microsoft-Windows-Security-Auditing | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 35 |
|---|---|
| Median length | 35 |
| Mean length | 35 |
| Min length | 35 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 12544 |
|---|
| Value | Count | Frequency (%) | |
| 12544 | 3296031 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 5 |
|---|---|
| Median length | 5 |
| Mean length | 5 |
| Min length | 5 |
| Distinct | 3170345 |
|---|---|
| Distinct (%) | 96.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 25.1 MiB |
| 2020-09-20T17:00:01.562Z | 15 |
|---|---|
| 2020-09-23T17:00:01.915Z | 13 |
| 2020-09-23T17:00:01.087Z | 12 |
| 2020-09-23T17:00:01.29Z | 12 |
| 2020-09-20T17:00:01.75Z | 11 |
| Other values (3170340) |
| Value | Count | Frequency (%) | |
| 2020-09-20T17:00:01.562Z | 15 | < 0.1% | |
| 2020-09-23T17:00:01.915Z | 13 | < 0.1% | |
| 2020-09-23T17:00:01.087Z | 12 | < 0.1% | |
| 2020-09-23T17:00:01.29Z | 12 | < 0.1% | |
| 2020-09-20T17:00:01.75Z | 11 | < 0.1% | |
| 2020-09-21T17:00:01.587Z | 11 | < 0.1% | |
| 2020-09-21T17:00:01.556Z | 10 | < 0.1% | |
| 2020-09-21T17:00:01.009Z | 10 | < 0.1% | |
| 2020-09-20T17:00:01.531Z | 10 | < 0.1% | |
| 2020-09-21T13:00:01.535Z | 10 | < 0.1% | |
| Other values (3170335) | 3295917 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 3057810 ? |
|---|---|
| Unique (%) | 92.8% |
Histogram of lengths of the category
Length
| Max length | 24 |
|---|---|
| Median length | 24 |
| Mean length | 23.88784177 |
| Min length | 20 |
Pearson's r
The Pearson's correlation coefficient (r) is a measure of linear correlation between two variables. It's value lies between -1 and +1, -1 indicating total negative linear correlation, 0 indicating no linear correlation and 1 indicating total positive linear correlation. Furthermore, r is invariant under separate changes in location and scale of the two variables, implying that for a linear function the angle to the x-axis does not affect r.To calculate r for two variables X and Y, one divides the covariance of X and Y by the product of their standard deviations.
Spearman's ρ
The Spearman's rank correlation coefficient (ρ) is a measure of monotonic correlation between two variables, and is therefore better in catching nonlinear monotonic correlations than Pearson's r. It's value lies between -1 and +1, -1 indicating total negative monotonic correlation, 0 indicating no monotonic correlation and 1 indicating total positive monotonic correlation.To calculate ρ for two variables X and Y, one divides the covariance of the rank variables of X and Y by the product of their standard deviations.
Kendall's τ
Similarly to Spearman's rank correlation coefficient, the Kendall rank correlation coefficient (τ) measures ordinal association between two variables. It's value lies between -1 and +1, -1 indicating total negative correlation, 0 indicating no correlation and 1 indicating total positive correlation.To calculate τ for two variables X and Y, one determines the number of concordant and discordant pairs of observations. τ is given by the number of concordant pairs minus the discordant pairs divided by the total number of pairs.
Phik (φk)
Phik (φk) is a new and practical correlation coefficient that works consistently between categorical, ordinal and interval variables, captures non-linear dependency and reverts to the Pearson correlation coefficient in case of a bivariate normal input distribution. There is extensive documentation available here.Cramér's V (φc)
Cramér's V is an association measure for nominal random variables. The coefficient ranges from 0 to 1, with 0 indicating independence and 1 indicating perfect association. The empirical estimators used for Cramér's V have been proved to be biased, even for large samples. We use a bias-corrected measure that has been proposed by Bergsma in 2013 that can be found here.First rows
| Id | Timestamp | Data Type | Visibility | ARCHITECTURE | COCOM_EVENTDATA_DATA_IPADDRESS | COUNTRY_EVENTDATA_DATA_IPADDRESS | DOMAIN | DOMAINCONTROLLER | DOMAINCONTROLLERNUMBER | EVENTDATA_DATA_AUTHENTICATIONPACKAGENAME | EVENTDATA_DATA_IMPERSONATIONLEVEL | EVENTDATA_DATA_IPADDRESS | EVENTDATA_DATA_IPPORT | EVENTDATA_DATA_KEYLENGTH | EVENTDATA_DATA_LMPACKAGENAME | EVENTDATA_DATA_LOGONGUID | EVENTDATA_DATA_LOGONPROCESSNAME | EVENTDATA_DATA_LOGONTYPE | EVENTDATA_DATA_PROCESSID | EVENTDATA_DATA_SUBJECTLOGONID | EVENTDATA_DATA_SUBJECTUSERSID | EVENTDATA_DATA_TARGETDOMAINNAME | EVENTDATA_DATA_TARGETDOMAINNAME_LCASE | EVENTDATA_DATA_TARGETDOMAINNAME_REVERSE | EVENTDATA_DATA_TARGETLOGONID | EVENTDATA_DATA_TARGETUSERNAME | EVENTDATA_DATA_TARGETUSERNAME_LCASE | EVENTDATA_DATA_TARGETUSERSID | EVENTDATA_DATA_WORKSTATIONNAME | FILENAME_INGEST | IPBRANCHCATEGORY_EVENTDATA_DATA_IPADDRESS | LATITUDE_EVENTDATA_DATA_IPADDRESS | LOCAL_SYSTEM_TIMECREATED_SYSTEMTIME | LOCAL_TIMESTAMP | LOCATION | LONGITUDE_EVENTDATA_DATA_IPADDRESS | NETWORK_COLLECTION | ORGANIZATION_OWNER_EVENTDATA_DATA_IPADDRESS | SITE_COLLECTION | SYSTEM_CHANNEL | SYSTEM_COMPUTER | SYSTEM_COMPUTER_REVERSE | SYSTEM_EVENTID | SYSTEM_EVENTRECORDID | SYSTEM_EXECUTION_PROCESSID | SYSTEM_EXECUTION_THREADID | SYSTEM_KEYWORDS | SYSTEM_LEVEL | SYSTEM_OPCODE | SYSTEM_PROVIDER_GUID | SYSTEM_PROVIDER_NAME | SYSTEM_TASK | SYSTEM_TIMECREATED_SYSTEMTIME | SYSTEM_VERSION | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 0001bf562bc9b3f9cd1e08d831c07b59 | 1600568918548 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 1.0 | Kerberos | %%1840 | 206.37.251.193 | 51630 | 0 | NaN | F21C8E5A-C35E-900F-BBD5-67D58E8DF4E3 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xb82abb7e | BUCHA5C1SRV02$ | bucha5c1srv02$ | S-1-5-21-3822721094-983390456-1902330015-9880145 | NaN | nase.ds.army.mil_bucha1sep000001_security_2020_09_20_bucha1sep000001-security-2020-09-20-06-12-16-081.xml.zip | Army | 18.411313 | 2020-09-19T22:28:38.548-04:00[America/Puerto_Rico] | 2020-09-19T22:28:38.548-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000001 | Security | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 4624 | 755790618 | 932 | 9964 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T02:28:38.548Z | 1 |
| 1 | 0018f78e24faa2d33a5edb25389d82a5 | 1600631874001 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.237.130 | 61320 | 0 | NaN | A4916DF8-6F24-0D55-B077-26360B90ED7A | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x70f5590e | grissel.rosa | grissel.rosa | S-1-5-21-3822721094-983390456-1902330015-214901 | NaN | nase.ds.army.mil_rucka1sep000002_security_2020_09_20_rucka1sep000002-security-2020-09-20-20-31-06-795.xml.zip | Army | 18.411313 | 2020-09-20T15:57:54.001-04:00[America/Puerto_Rico] | 2020-09-20T15:57:54.001-04:00[America/Puerto_Rico] | RUCK | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | rucka1sep000002 | Security | RUCKA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.RUCKA1SEP000002 | 4624 | 13056754941 | 864 | 10792 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T19:57:54.001Z | 1 |
| 2 | 00253eef8973894112a57e1604ace6ce | 1600626059352 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.233.84 | 57139 | 0 | NaN | E8105A26-843E-4368-9F22-7201B6396496 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x660be7fe | BUCHW1H1AAWK307$ | buchw1h1aawk307$ | S-1-5-21-3822721094-983390456-1902330015-14514140 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_20_bucha1sep000002-security-2020-09-20-21-55-11-192.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_20_bucha1sep000002-security-2020-09-20-23-37-42-647.xml.zip | Army | 18.411313 | 2020-09-20T14:20:59.352-04:00[America/Puerto_Rico] | 2020-09-20T14:20:59.352-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 715859566 | 920 | 13420 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T18:20:59.352Z | 1 |
| 3 | 00480d40360a600e7b49b47deb3043dc | 1600581085422 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.233.152 | 54079 | 0 | NaN | 53A15AD8-B5D7-5B68-0FC7-7CC18C350A34 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x5e2b5883 | BUCHW1H1AAWK320$ | buchw1h1aawk320$ | S-1-5-21-3822721094-983390456-1902330015-17368875 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_20_bucha1sep000002-security-2020-09-20-09-55-11-873.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_20_bucha1sep000002-security-2020-09-20-15-09-01-346.xml.zip | Army | 18.411313 | 2020-09-20T01:51:25.422-04:00[America/Puerto_Rico] | 2020-09-20T01:51:25.422-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 715448234 | 920 | 6648 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T05:51:25.422Z | 1 |
| 4 | 007d36793dabea537d18a65558262d86 | 1600597758040 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.233.140 | 57841 | 0 | NaN | 2C8AD1A6-24AA-82C3-EBE8-276C0AD715C2 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x6104fb0a | ulises.marrerodiaz | ulises.marrerodiaz | S-1-5-21-3822721094-983390456-1902330015-13405329 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_20_bucha1sep000002-security-2020-09-20-15-09-01-346.xml.zip | Army | 18.411313 | 2020-09-20T06:29:18.040-04:00[America/Puerto_Rico] | 2020-09-20T06:29:18.040-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 715548538 | 920 | 13208 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T10:29:18.04Z | 1 |
| 5 | 00c09a4a1df614cfa63e46364eff82fe | 1600595581480 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 1.0 | Kerberos | %%1833 | 192.86.236.70 | 50267 | 0 | NaN | 780ABBB6-3DE9-DDC4-0E75-36042B1A1CA4 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xbdbef16c | inkyung.a.walker | inkyung.a.walker | S-1-5-21-3822721094-983390456-1902330015-17026598 | NaN | nase.ds.army.mil_bucha1sep000001_security_2020_09_20_bucha1sep000001-security-2020-09-20-09-55-10-648.xml.zip,nase.ds.army.mil_bucha1sep000001_security_2020_09_20_bucha1sep000001-security-2020-09-20-17-14-37-028.xml.zip | Army | 18.411313 | 2020-09-20T05:53:01.480-04:00[America/Puerto_Rico] | 2020-09-20T05:53:01.480-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000001 | Security | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 4624 | 755946707 | 932 | 9188 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T09:53:01.48Z | 1 |
| 6 | 00e0675c96dab6c8704718aba606e4d8 | 1600603097152 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 1.0 | Kerberos | %%1833 | 192.86.233.14 | 63207 | 0 | NaN | 3B3CF9A4-B4B0-7421-4B57-2821078B9FF3 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xbf4cc8da | BUCHW6XDAAWK016$ | buchw6xdaawk016$ | S-1-5-21-3822721094-983390456-1902330015-17681883 | NaN | nase.ds.army.mil_bucha1sep000001_security_2020_09_20_bucha1sep000001-security-2020-09-20-17-14-37-028.xml.zip | Army | 18.411313 | 2020-09-20T07:58:17.152-04:00[America/Puerto_Rico] | 2020-09-20T07:58:17.152-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000001 | Security | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 4624 | 755988939 | 932 | 12756 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T11:58:17.152Z | 1 |
| 7 | 00e131900ab1b8d8952825175f1b7319 | 1600604132645 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 1.0 | Kerberos | %%1833 | 192.86.233.214 | 61829 | 0 | NaN | 14B2E4DA-66EE-9E06-A322-059EC5BB25D9 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xbf7c5928 | BUCHW1H1AAWK215$ | buchw1h1aawk215$ | S-1-5-21-3822721094-983390456-1902330015-15196847 | NaN | nase.ds.army.mil_bucha1sep000001_security_2020_09_20_bucha1sep000001-security-2020-09-20-17-14-37-028.xml.zip | Army | 18.411313 | 2020-09-20T08:15:32.645-04:00[America/Puerto_Rico] | 2020-09-20T08:15:32.645-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000001 | Security | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 4624 | 755995959 | 932 | 13628 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T12:15:32.645Z | 1 |
| 8 | 00fdeca56990aa72fc28dfea5f318954 | 1600627362648 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.234.72 | 57862 | 0 | NaN | B0935571-FADA-6169-8FE4-2E33919C7B7E | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x66514ecb | BUCHW6SAAAWK013$ | buchw6saaawk013$ | S-1-5-21-3822721094-983390456-1902330015-14891726 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_20_bucha1sep000002-security-2020-09-20-21-55-11-192.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_20_bucha1sep000002-security-2020-09-20-23-37-42-647.xml.zip | Army | 18.411313 | 2020-09-20T14:42:42.648-04:00[America/Puerto_Rico] | 2020-09-20T14:42:42.648-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 715876836 | 920 | 13116 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T18:42:42.648Z | 1 |
| 9 | 010759e7708529bc6f881eeab31160de | 1600601042920 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 1.0 | Kerberos | %%1833 | 192.86.236.70 | 51184 | 0 | NaN | CECFF3B6-4780-DEFE-7162-89C08FB81DB2 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xbed2060f | inkyung.a.walker | inkyung.a.walker | S-1-5-21-3822721094-983390456-1902330015-17026598 | NaN | nase.ds.army.mil_bucha1sep000001_security_2020_09_20_bucha1sep000001-security-2020-09-20-17-14-37-028.xml.zip | Army | 18.411313 | 2020-09-20T07:24:02.920-04:00[America/Puerto_Rico] | 2020-09-20T07:24:02.920-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000001 | Security | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 4624 | 755977069 | 932 | 13628 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-20T11:24:02.92Z | 1 |
Last rows
| Id | Timestamp | Data Type | Visibility | ARCHITECTURE | COCOM_EVENTDATA_DATA_IPADDRESS | COUNTRY_EVENTDATA_DATA_IPADDRESS | DOMAIN | DOMAINCONTROLLER | DOMAINCONTROLLERNUMBER | EVENTDATA_DATA_AUTHENTICATIONPACKAGENAME | EVENTDATA_DATA_IMPERSONATIONLEVEL | EVENTDATA_DATA_IPADDRESS | EVENTDATA_DATA_IPPORT | EVENTDATA_DATA_KEYLENGTH | EVENTDATA_DATA_LMPACKAGENAME | EVENTDATA_DATA_LOGONGUID | EVENTDATA_DATA_LOGONPROCESSNAME | EVENTDATA_DATA_LOGONTYPE | EVENTDATA_DATA_PROCESSID | EVENTDATA_DATA_SUBJECTLOGONID | EVENTDATA_DATA_SUBJECTUSERSID | EVENTDATA_DATA_TARGETDOMAINNAME | EVENTDATA_DATA_TARGETDOMAINNAME_LCASE | EVENTDATA_DATA_TARGETDOMAINNAME_REVERSE | EVENTDATA_DATA_TARGETLOGONID | EVENTDATA_DATA_TARGETUSERNAME | EVENTDATA_DATA_TARGETUSERNAME_LCASE | EVENTDATA_DATA_TARGETUSERSID | EVENTDATA_DATA_WORKSTATIONNAME | FILENAME_INGEST | IPBRANCHCATEGORY_EVENTDATA_DATA_IPADDRESS | LATITUDE_EVENTDATA_DATA_IPADDRESS | LOCAL_SYSTEM_TIMECREATED_SYSTEMTIME | LOCAL_TIMESTAMP | LOCATION | LONGITUDE_EVENTDATA_DATA_IPADDRESS | NETWORK_COLLECTION | ORGANIZATION_OWNER_EVENTDATA_DATA_IPADDRESS | SITE_COLLECTION | SYSTEM_CHANNEL | SYSTEM_COMPUTER | SYSTEM_COMPUTER_REVERSE | SYSTEM_EVENTID | SYSTEM_EVENTRECORDID | SYSTEM_EXECUTION_PROCESSID | SYSTEM_EXECUTION_THREADID | SYSTEM_KEYWORDS | SYSTEM_LEVEL | SYSTEM_OPCODE | SYSTEM_PROVIDER_GUID | SYSTEM_PROVIDER_NAME | SYSTEM_TASK | SYSTEM_TIMECREATED_SYSTEMTIME | SYSTEM_VERSION | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 3296021 | ff0ac894d3cca3c1712f579408ddb5de | 1601063046181 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 1.0 | Kerberos | %%1833 | 192.86.233.95 | 56721 | 0 | NaN | 050EDB16-7DDF-5B8B-B098-D0DE4408CD8A | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x12540dca9 | LAND1470627758121004 | land1470627758121004 | S-1-5-21-3822721094-983390456-1902330015-18783928 | NaN | nase.ds.army.mil_bucha1sep000001_security_2020_09_25_bucha1sep000001-security-2020-09-25-20-32-57-736.xml.zip | Army | 18.411313 | 2020-09-25T15:44:06.181-04:00[America/Puerto_Rico] | 2020-09-25T15:44:06.181-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000001 | Security | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 4624 | 760054613 | 932 | 8484 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T19:44:06.181Z | 1 |
| 3296022 | ff4f1a8f7851bb38c10a2124479f1e77 | 1601064353932 | evtx-security-c | U&FOUO | NaN | USINDOPACOM | PR | NaN | NaN | NaN | Kerberos | %%1833 | 192.86.237.51 | 53557 | 0 | NaN | 7EA05452-3251-980A-F68E-51040D1D9397 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x4fd63c34 | BUCHW1H1AANB191$ | buchw1h1aanb191$ | S-1-5-21-3822721094-983390456-1902330015-16296211 | NaN | dahq.ds.army.mil_carsa1hqvxd0002_security_2020_09_25_carsa1hqvxd0002-security-2020-09-25-23-55-15-627.xml.zip,dahq.ds.army.mil_carsa1hqvxd0002_security_2020_09_26_carsa1hqvxd0002-security-2020-09-26-00-43-30-208.xml.zip | Army | 18.411313 | 2020-09-25T16:05:53.932-04:00[America/Puerto_Rico] | 2020-09-25T16:05:53.932-04:00[America/Puerto_Rico] | NaN | -66.124234 | dahq.ds.army.mil | FORT BUCHANAN | carsa1hqvxd0002 | Security | CARSA1HQVXD0002.dahq.ds.army.mil | mil.army.ds.dahq.CARSA1HQVXD0002 | 4624 | 709653304 | 756 | 2928 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T20:05:53.932Z | 1 |
| 3296023 | ff4face363d571e54b0143f3c2faba62 | 1601034075309 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 206.37.251.78 | 51194 | 0 | NaN | 66CA73C5-CDC3-B439-A800-836C239E140F | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xb39c566e | BUCHA7FSGP01$ | bucha7fsgp01$ | S-1-5-21-3822721094-983390456-1902330015-10172758 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-14-52-06-339.xml.zip | Army | 18.411313 | 2020-09-25T07:41:15.309-04:00[America/Puerto_Rico] | 2020-09-25T07:41:15.309-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 719429296 | 920 | 4364 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T11:41:15.309Z | 1 |
| 3296024 | ff511cf9e54b1d50ac42140cc69e6c24 | 1601031147657 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.236.54 | 55584 | 0 | NaN | 07F827B2-2FD8-ABC9-A1F7-51D1041423E3 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xb3198a2e | nancy.ramos1 | nancy.ramos1 | S-1-5-21-3822721094-983390456-1902330015-352989 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-14-52-06-339.xml.zip | Army | 18.411313 | 2020-09-25T06:52:27.657-04:00[America/Puerto_Rico] | 2020-09-25T06:52:27.657-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 719405927 | 920 | 13116 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T10:52:27.657Z | 1 |
| 3296025 | ff60af183d4a89e2a3b4b1173c210d17 | 1601007602493 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.233.63 | 63314 | 0 | NaN | 600CFF0E-F7BD-ADB1-8772-D121B87C4EA0 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xaec6434e | BUCHW1H1AAWK711$ | buchw1h1aawk711$ | S-1-5-21-3822721094-983390456-1902330015-16440529 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-09-55-13-152.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-14-52-06-339.xml.zip | Army | 18.411313 | 2020-09-25T00:20:02.493-04:00[America/Puerto_Rico] | 2020-09-25T00:20:02.493-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 719255285 | 920 | 12804 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T04:20:02.493Z | 1 |
| 3296026 | ffb8d4e8c6194296ec5ed4072d9da952 | 1600995589057 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.233.101 | 64313 | 0 | NaN | 03715B36-343F-3CAA-B991-03F416F98C5D | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xacac7a62 | justin.s.mcewen | justin.s.mcewen | S-1-5-21-3822721094-983390456-1902330015-11129376 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-01-24-32-488.xml.zip | Army | 18.411313 | 2020-09-24T20:59:49.057-04:00[America/Puerto_Rico] | 2020-09-24T20:59:49.057-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 719178052 | 920 | 19636 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T00:59:49.057Z | 1 |
| 3296027 | ffbcef2d781e01139b9a386f6bcffe05 | 1601035846734 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 1.0 | Kerberos | %%1833 | 192.86.233.173 | 64212 | 0 | NaN | 4BCFFA8E-C04C-C503-7D3E-55EF58B5DC68 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0x11f11dcfb | BUCHW1H1AAWK636$ | buchw1h1aawk636$ | S-1-5-21-3822721094-983390456-1902330015-16278617 | NaN | nase.ds.army.mil_bucha1sep000001_security_2020_09_25_bucha1sep000001-security-2020-09-25-20-32-57-736.xml.zip | Army | 18.411313 | 2020-09-25T08:10:46.734-04:00[America/Puerto_Rico] | 2020-09-25T08:10:46.734-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000001 | Security | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 4624 | 759782447 | 932 | 4128 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T12:10:46.734Z | 1 |
| 3296028 | ffc6183dab64773e631393f11adba686 | 1601054765452 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.233.64 | 63088 | 0 | NaN | BB9685AC-5D00-0D4E-C308-9CB2072BDD9F | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xb7741abb | carlos.o.guzman | carlos.o.guzman | S-1-5-21-3822721094-983390456-1902330015-22498 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-21-55-13-202.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_26_bucha1sep000002-security-2020-09-26-02-30-10-558.xml.zip | Army | 18.411313 | 2020-09-25T13:26:05.452-04:00[America/Puerto_Rico] | 2020-09-25T13:26:05.452-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 719653454 | 920 | 13208 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T17:26:05.452Z | 1 |
| 3296029 | ffc9044bf25e688528ca8293b9122dfb | 1601009947465 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 206.37.250.246 | 57672 | 0 | NaN | 67954613-1106-2FAE-BCF7-94329D75EDF6 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xaf2e088c | BUCHA1SEP000002$ | bucha1sep000002$ | S-1-5-18 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-09-55-13-152.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-14-52-06-339.xml.zip | Army | 18.411313 | 2020-09-25T00:59:07.465-04:00[America/Puerto_Rico] | 2020-09-25T00:59:07.465-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 719270367 | 920 | 4364 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T04:59:07.465Z | 1 |
| 3296030 | ffd1317c919e2cf788e629aac073ca0f | 1601003533594 | evtx-security-c | U&FOUO | P | USINDOPACOM | PR | SE | A1 | 2.0 | Kerberos | %%1833 | 192.86.236.27 | 56699 | 0 | NaN | C7744321-773E-BF02-20FB-F3FF41BEDD43 | Kerberos | 3 | 0x0 | 0x0 | S-1-0-0 | NASE | nase | NASE | 0xae119eb2 | BUCHW6XDAAWK011$ | buchw6xdaawk011$ | S-1-5-21-3822721094-983390456-1902330015-14893669 | NaN | nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-09-55-13-152.xml.zip,nase.ds.army.mil_bucha1sep000002_security_2020_09_25_bucha1sep000002-security-2020-09-25-14-52-06-339.xml.zip | Army | 18.411313 | 2020-09-24T23:12:13.594-04:00[America/Puerto_Rico] | 2020-09-24T23:12:13.594-04:00[America/Puerto_Rico] | BUCH | -66.124234 | nase.ds.army.mil | FORT BUCHANAN | bucha1sep000002 | Security | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 4624 | 719226658 | 920 | 1644 | 0x8020000000000000 | 0 | 0 | 54849625-5478-4994-A5BA-3E3B0328C30D | Microsoft-Windows-Security-Auditing | 12544 | 2020-09-25T03:12:13.594Z | 1 |